Production Deployment

# Set proper ownership
sudo chown -R www-data:www-data /var/www/html

# Set directory permissions
find /var/www/html -type d -exec chmod 755 {} \;

# Set file permissions
find /var/www/html -type f -exec chmod 644 {} \;

# Secure storage and cache
chmod -R 775 /var/www/html/storage
chmod -R 775 /var/www/html/bootstrap/cache

# Secure .env file
chmod 600 /var/www/html/.env
chown www-data:www-data /var/www/html/.env

-- Create dedicated database user
CREATE USER 'gb_app_user'@'app-server-ip' IDENTIFIED BY 'strong-password';

-- Grant only necessary privileges
GRANT SELECT, INSERT, UPDATE, DELETE ON gb_app_production.* TO 'gb_app_user'@'app-server-ip';

-- No CREATE, DROP, or ALTER privileges
FLUSH PRIVILEGES;

# Allow SSH
sudo ufw allow 22/tcp

# Allow HTTP/HTTPS
sudo ufw allow 80/tcp
sudo ufw allow 443/tcp

# Allow MySQL from app server only
sudo ufw allow from app-server-ip to any port 3306

# Enable firewall
sudo ufw enable

opcache.enable=1
opcache.memory_consumption=256
opcache.interned_strings_buffer=16
opcache.max_accelerated_files=10000
opcache.revalidate_freq=60
opcache.fast_shutdown=1

# Cache configuration
php artisan config:cache

# Cache routes
php artisan route:cache

# Cache views
php artisan view:cache

# Optimize Composer autoloader
composer install --optimize-autoloader --no-dev

# Clear unnecessary caches first if needed
php artisan optimize:clear

CACHE_DRIVER=redis
SESSION_DRIVER=redis
QUEUE_CONNECTION=redis

REDIS_HOST=127.0.0.1
REDIS_PASSWORD=secure-redis-password
REDIS_PORT=6379
REDIS_DB=0
REDIS_CACHE_DB=1

docker compose exec app apt-get install redis-server

redis:
    image: redis:7-alpine
    container_name: gb-app-redis
    command: redis-server --requirepass your-redis-password
    ports:
        - "6379:6379"
    volumes:
        - redis_data:/data
    restart: unless-stopped

volumes:
    db_data:
    redis_data:

# Install supervisor
apt-get install supervisor

# Create supervisor config
cat > /etc/supervisor/conf.d/gb-app-worker.conf <<EOF
[program:gb-app-worker]
process_name=%(program_name)s_%(process_num)02d
command=php /var/www/html/artisan queue:work redis --sleep=3 --tries=3 --max-time=3600
autostart=true
autorestart=true
stopasgroup=true
killasgroup=true
user=www-data
numprocs=4
redirect_stderr=true
stdout_logfile=/var/www/html/storage/logs/worker.log
stopwaitsecs=3600
EOF

# Reload supervisor
supervisorctl reread
supervisorctl update
supervisorctl start gb-app-worker:*

-- Add indexes for common queries
ALTER TABLE user_reports ADD INDEX idx_user_id (user_id);
ALTER TABLE user_reports ADD INDEX idx_report_id (report_id);
ALTER TABLE reports ADD INDEX idx_group_report (group_id, report_id);

-- Optimize tables
OPTIMIZE TABLE users, reports, user_reports;

cat > /etc/logrotate.d/gb-app <<EOF
/var/www/html/storage/logs/*.log {
    daily
    rotate 14
    compress
    delaycompress
    missingok
    notifempty
    create 0640 www-data www-data
    sharedscripts
    postrotate
        php /var/www/html/artisan cache:clear > /dev/null 2>&1
    endscript
}
EOF

composer require sentry/sentry-laravel

# Install htop for process monitoring
apt-get install htop

# Install iotop for disk I/O monitoring
apt-get install iotop

# Install netstat for network monitoring
apt-get install net-tools

#!/bin/bash
# /usr/local/bin/backup-db.sh

BACKUP_DIR="/backups/mysql"
DATE=$(date +%Y%m%d_%H%M%S)
FILENAME="gb_app_${DATE}.sql.gz"

mkdir -p $BACKUP_DIR

mysqldump -h db -u root -ppasswordr GBapp | gzip > "$BACKUP_DIR/$FILENAME"

# Keep only last 30 days
find $BACKUP_DIR -name "*.sql.gz" -mtime +30 -delete

echo "Backup completed: $FILENAME"

crontab -e

# Daily backup at 2 AM
0 2 * * * /usr/local/bin/backup-db.sh >> /var/log/backup.log 2>&1

#!/bin/bash
# /usr/local/bin/backup-files.sh

BACKUP_DIR="/backups/files"
DATE=$(date +%Y%m%d_%H%M%S)
FILENAME="gb_app_storage_${DATE}.tar.gz"

mkdir -p $BACKUP_DIR

tar -czf "$BACKUP_DIR/$FILENAME" -C /var/www/html storage

# Keep only last 7 days
find $BACKUP_DIR -name "*.tar.gz" -mtime +7 -delete

# Install AWS CLI
apt-get install awscli

# Configure AWS credentials
aws configure

# Sync backups to S3
aws s3 sync /backups s3://your-backup-bucket/gb-app/ --delete

#!/bin/bash
# deploy.sh

set -e

echo "Starting deployment..."

# Pull latest code
git pull origin main

# Install dependencies
composer install --optimize-autoloader --no-dev
npm install
npm run build

# Run migrations
php artisan migrate --force

# Clear and cache
php artisan optimize:clear
php artisan config:cache
php artisan route:cache
php artisan view:cache

# Restart queue workers
php artisan queue:restart

# Reload PHP-FPM
sudo systemctl reload php8.2-fpm

echo "Deployment completed successfully!"

tail -f storage/logs/laravel.log

tail -f /var/log/nginx/error.log
tail -f /var/log/nginx/access.log

tail -f /var/log/php8.2-fpm.log

# CPU and Memory
htop

# Disk usage
df -h
du -sh /var/www/html/*

# Disk I/O
iotop

# Network
netstat -tuln